PT-2009-5108 · Sun · Java Se 5.0

Published 2009-08-10 · Updated 2018-10-10 · CVE-2009-2724

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java SE 5.0 versions prior to Update 20

Description A race condition exists in the java.lang package, related to "3Y Race condition in reflection checks." The impact and attack vectors of this issue are unknown.

Recommendations For Sun Java SE 5.0 versions prior to Update 20, update to a version that includes the necessary security fixes, such as Update 20 or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2009-2724

RHSA-2009:1199

Affected Products

Java Se 5.0

References · 10

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2724 · Security Note
• http://security.gentoo.org/glsa/glsa-200911-02.xml · Vendor Advisory
• http://java.sun.com/j2se/1.5.0/ReleaseNotes.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2724 · Note
• http://secunia.com/advisories/37460 · Note
• http://vmware.com/security/advisories/VMSA-2009-0016.html · Note
• http://secunia.com/advisories/37386 · Note
• http://vupen.com/english/advisories/2009/3316 · Note
• http://securityfocus.com/archive/1/507985/100/0/threaded · Note